CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-11236

stdlib/canonicalize.c in the GNU C Library (aka glibc or libc6) 2.27 and earlier, when processing very long pathname arguments to the realpath function, could encounter an integer overflow on 32-bit architectures, leading to a stack-based buffer overflow and, potentially, arbitrary code execution.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.008

EPSS Ranking 73.4%

CVSS Severity

CVSS v3 Score 9.8

CVSS v2 Score 7.5

References

Products affected by CVE-2018-11236

Gnu » Glibc » Version: N/A

cpe:2.3:a:gnu:glibc:-
Gnu » Glibc » Version: 0.1

cpe:2.3:a:gnu:glibc:0.1
Gnu » Glibc » Version: 0.4

cpe:2.3:a:gnu:glibc:0.4
Gnu » Glibc » Version: 0.4.1

cpe:2.3:a:gnu:glibc:0.4.1
Gnu » Glibc » Version: 0.5

cpe:2.3:a:gnu:glibc:0.5
Gnu » Glibc » Version: 0.6

cpe:2.3:a:gnu:glibc:0.6
Gnu » Glibc » Version: 1.00

cpe:2.3:a:gnu:glibc:1.00
Gnu » Glibc » Version: 1.01

cpe:2.3:a:gnu:glibc:1.01
Gnu » Glibc » Version: 1.02

cpe:2.3:a:gnu:glibc:1.02
Gnu » Glibc » Version: 1.03

cpe:2.3:a:gnu:glibc:1.03
Gnu » Glibc » Version: 1.04

cpe:2.3:a:gnu:glibc:1.04
Gnu » Glibc » Version: 1.05

cpe:2.3:a:gnu:glibc:1.05
Gnu » Glibc » Version: 1.06

cpe:2.3:a:gnu:glibc:1.06
Gnu » Glibc » Version: 1.06.1

cpe:2.3:a:gnu:glibc:1.06.1
Gnu » Glibc » Version: 1.06.10

cpe:2.3:a:gnu:glibc:1.06.10
Gnu » Glibc » Version: 1.06.11

cpe:2.3:a:gnu:glibc:1.06.11
Gnu » Glibc » Version: 1.06.12

cpe:2.3:a:gnu:glibc:1.06.12
Gnu » Glibc » Version: 1.06.13

cpe:2.3:a:gnu:glibc:1.06.13
Gnu » Glibc » Version: 1.06.2

cpe:2.3:a:gnu:glibc:1.06.2
Gnu » Glibc » Version: 1.06.3

cpe:2.3:a:gnu:glibc:1.06.3
Gnu » Glibc » Version: 1.06.4

cpe:2.3:a:gnu:glibc:1.06.4
Gnu » Glibc » Version: 1.06.6

cpe:2.3:a:gnu:glibc:1.06.6
Gnu » Glibc » Version: 1.06.7

cpe:2.3:a:gnu:glibc:1.06.7
Gnu » Glibc » Version: 1.06.8

cpe:2.3:a:gnu:glibc:1.06.8
Gnu » Glibc » Version: 1.06.9

cpe:2.3:a:gnu:glibc:1.06.9
Gnu » Glibc » Version: 1.07

cpe:2.3:a:gnu:glibc:1.07
Gnu » Glibc » Version: 1.07.1

cpe:2.3:a:gnu:glibc:1.07.1
Gnu » Glibc » Version: 1.07.2

cpe:2.3:a:gnu:glibc:1.07.2
Gnu » Glibc » Version: 1.07.3

cpe:2.3:a:gnu:glibc:1.07.3
Gnu » Glibc » Version: 1.07.4

cpe:2.3:a:gnu:glibc:1.07.4
Gnu » Glibc » Version: 1.07.5

cpe:2.3:a:gnu:glibc:1.07.5
Gnu » Glibc » Version: 1.07.6

cpe:2.3:a:gnu:glibc:1.07.6
Gnu » Glibc » Version: 1.08

cpe:2.3:a:gnu:glibc:1.08
Gnu » Glibc » Version: 1.08.1

cpe:2.3:a:gnu:glibc:1.08.1
Gnu » Glibc » Version: 1.08.10

cpe:2.3:a:gnu:glibc:1.08.10
Gnu » Glibc » Version: 1.08.11

cpe:2.3:a:gnu:glibc:1.08.11
Gnu » Glibc » Version: 1.08.12

cpe:2.3:a:gnu:glibc:1.08.12
Gnu » Glibc » Version: 1.08.13

cpe:2.3:a:gnu:glibc:1.08.13
Gnu » Glibc » Version: 1.08.14

cpe:2.3:a:gnu:glibc:1.08.14
Gnu » Glibc » Version: 1.08.3

cpe:2.3:a:gnu:glibc:1.08.3
Gnu » Glibc » Version: 1.08.4

cpe:2.3:a:gnu:glibc:1.08.4
Gnu » Glibc » Version: 1.08.5

cpe:2.3:a:gnu:glibc:1.08.5
Gnu » Glibc » Version: 1.08.6

cpe:2.3:a:gnu:glibc:1.08.6
Gnu » Glibc » Version: 1.08.7

cpe:2.3:a:gnu:glibc:1.08.7
Gnu » Glibc » Version: 1.08.8

cpe:2.3:a:gnu:glibc:1.08.8
Gnu » Glibc » Version: 1.08.9

cpe:2.3:a:gnu:glibc:1.08.9
Gnu » Glibc » Version: 1.09

cpe:2.3:a:gnu:glibc:1.09
Gnu » Glibc » Version: 1.09.1

cpe:2.3:a:gnu:glibc:1.09.1
Gnu » Glibc » Version: 1.09.2

cpe:2.3:a:gnu:glibc:1.09.2
Gnu » Glibc » Version: 1.09.3

cpe:2.3:a:gnu:glibc:1.09.3
Gnu » Glibc » Version: 1.09.5

cpe:2.3:a:gnu:glibc:1.09.5
Gnu » Glibc » Version: 1.90

cpe:2.3:a:gnu:glibc:1.90
Gnu » Glibc » Version: 1.91

cpe:2.3:a:gnu:glibc:1.91
Gnu » Glibc » Version: 1.92

cpe:2.3:a:gnu:glibc:1.92
Gnu » Glibc » Version: 1.93

cpe:2.3:a:gnu:glibc:1.93
Gnu » Glibc » Version: 2.0

cpe:2.3:a:gnu:glibc:2.0
Gnu » Glibc » Version: 2.0.1

cpe:2.3:a:gnu:glibc:2.0.1
Gnu » Glibc » Version: 2.0.100

cpe:2.3:a:gnu:glibc:2.0.100
Gnu » Glibc » Version: 2.0.101

cpe:2.3:a:gnu:glibc:2.0.101
Gnu » Glibc » Version: 2.0.103

cpe:2.3:a:gnu:glibc:2.0.103
Gnu » Glibc » Version: 2.0.106

cpe:2.3:a:gnu:glibc:2.0.106
Gnu » Glibc » Version: 2.0.112

cpe:2.3:a:gnu:glibc:2.0.112
Gnu » Glibc » Version: 2.0.2

cpe:2.3:a:gnu:glibc:2.0.2
Gnu » Glibc » Version: 2.0.3

cpe:2.3:a:gnu:glibc:2.0.3
Gnu » Glibc » Version: 2.0.4

cpe:2.3:a:gnu:glibc:2.0.4
Gnu » Glibc » Version: 2.0.5

cpe:2.3:a:gnu:glibc:2.0.5
Gnu » Glibc » Version: 2.0.6

cpe:2.3:a:gnu:glibc:2.0.6
Gnu » Glibc » Version: 2.0.92

cpe:2.3:a:gnu:glibc:2.0.92
Gnu » Glibc » Version: 2.0.95

cpe:2.3:a:gnu:glibc:2.0.95
Gnu » Glibc » Version: 2.0.96

cpe:2.3:a:gnu:glibc:2.0.96
Gnu » Glibc » Version: 2.0.97

cpe:2.3:a:gnu:glibc:2.0.97
Gnu » Glibc » Version: 2.0.98

cpe:2.3:a:gnu:glibc:2.0.98
Gnu » Glibc » Version: 2.0.99

cpe:2.3:a:gnu:glibc:2.0.99
Gnu » Glibc » Version: 2.1

cpe:2.3:a:gnu:glibc:2.1
Gnu » Glibc » Version: 2.1.1

cpe:2.3:a:gnu:glibc:2.1.1
Gnu » Glibc » Version: 2.1.1.6

cpe:2.3:a:gnu:glibc:2.1.1.6
Gnu » Glibc » Version: 2.1.2

cpe:2.3:a:gnu:glibc:2.1.2
Gnu » Glibc » Version: 2.1.3

cpe:2.3:a:gnu:glibc:2.1.3
Gnu » Glibc » Version: 2.1.3.10

cpe:2.3:a:gnu:glibc:2.1.3.10
Gnu » Glibc » Version: 2.1.9

cpe:2.3:a:gnu:glibc:2.1.9
Gnu » Glibc » Version: 2.1.91

cpe:2.3:a:gnu:glibc:2.1.91
Gnu » Glibc » Version: 2.1.92

cpe:2.3:a:gnu:glibc:2.1.92
Gnu » Glibc » Version: 2.1.93

cpe:2.3:a:gnu:glibc:2.1.93
Gnu » Glibc » Version: 2.1.94

cpe:2.3:a:gnu:glibc:2.1.94
Gnu » Glibc » Version: 2.1.95

cpe:2.3:a:gnu:glibc:2.1.95
Gnu » Glibc » Version: 2.1.96

cpe:2.3:a:gnu:glibc:2.1.96
Gnu » Glibc » Version: 2.1.97

cpe:2.3:a:gnu:glibc:2.1.97
Gnu » Glibc » Version: 2.10

cpe:2.3:a:gnu:glibc:2.10
Gnu » Glibc » Version: 2.10.1

cpe:2.3:a:gnu:glibc:2.10.1
Gnu » Glibc » Version: 2.10.2

cpe:2.3:a:gnu:glibc:2.10.2
Gnu » Glibc » Version: 2.11

cpe:2.3:a:gnu:glibc:2.11
Gnu » Glibc » Version: 2.11.1

cpe:2.3:a:gnu:glibc:2.11.1
Gnu » Glibc » Version: 2.11.2

cpe:2.3:a:gnu:glibc:2.11.2
Gnu » Glibc » Version: 2.11.3

cpe:2.3:a:gnu:glibc:2.11.3
Gnu » Glibc » Version: 2.12

cpe:2.3:a:gnu:glibc:2.12
Gnu » Glibc » Version: 2.12.0

cpe:2.3:a:gnu:glibc:2.12.0
Gnu » Glibc » Version: 2.12.1

cpe:2.3:a:gnu:glibc:2.12.1
Gnu » Glibc » Version: 2.12.2

cpe:2.3:a:gnu:glibc:2.12.2
Gnu » Glibc » Version: 2.13

cpe:2.3:a:gnu:glibc:2.13
Gnu » Glibc » Version: 2.14

cpe:2.3:a:gnu:glibc:2.14
Gnu » Glibc » Version: 2.14.1

cpe:2.3:a:gnu:glibc:2.14.1
Gnu » Glibc » Version: 2.14.9000

cpe:2.3:a:gnu:glibc:2.14.9000
Gnu » Glibc » Version: 2.15

cpe:2.3:a:gnu:glibc:2.15
Gnu » Glibc » Version: 2.16

cpe:2.3:a:gnu:glibc:2.16
Gnu » Glibc » Version: 2.16.0

cpe:2.3:a:gnu:glibc:2.16.0
Gnu » Glibc » Version: 2.16.90

cpe:2.3:a:gnu:glibc:2.16.90
Gnu » Glibc » Version: 2.17

cpe:2.3:a:gnu:glibc:2.17
Gnu » Glibc » Version: 2.17.90

cpe:2.3:a:gnu:glibc:2.17.90
Gnu » Glibc » Version: 2.18

cpe:2.3:a:gnu:glibc:2.18
Gnu » Glibc » Version: 2.18.90

cpe:2.3:a:gnu:glibc:2.18.90
Gnu » Glibc » Version: 2.19

cpe:2.3:a:gnu:glibc:2.19
Gnu » Glibc » Version: 2.19.90

cpe:2.3:a:gnu:glibc:2.19.90
Gnu » Glibc » Version: 2.2

cpe:2.3:a:gnu:glibc:2.2
Gnu » Glibc » Version: 2.2.1

cpe:2.3:a:gnu:glibc:2.2.1
Gnu » Glibc » Version: 2.2.2

cpe:2.3:a:gnu:glibc:2.2.2
Gnu » Glibc » Version: 2.2.3

cpe:2.3:a:gnu:glibc:2.2.3
Gnu » Glibc » Version: 2.2.4

cpe:2.3:a:gnu:glibc:2.2.4
Gnu » Glibc » Version: 2.2.5

cpe:2.3:a:gnu:glibc:2.2.5
Gnu » Glibc » Version: 2.20

cpe:2.3:a:gnu:glibc:2.20
Gnu » Glibc » Version: 2.20.90

cpe:2.3:a:gnu:glibc:2.20.90
Gnu » Glibc » Version: 2.21

cpe:2.3:a:gnu:glibc:2.21
Gnu » Glibc » Version: 2.21.90

cpe:2.3:a:gnu:glibc:2.21.90
Gnu » Glibc » Version: 2.22

cpe:2.3:a:gnu:glibc:2.22
Gnu » Glibc » Version: 2.22.90

cpe:2.3:a:gnu:glibc:2.22.90
Gnu » Glibc » Version: 2.23

cpe:2.3:a:gnu:glibc:2.23
Gnu » Glibc » Version: 2.23.90

cpe:2.3:a:gnu:glibc:2.23.90
Gnu » Glibc » Version: 2.24

cpe:2.3:a:gnu:glibc:2.24
Gnu » Glibc » Version: 2.24.90

cpe:2.3:a:gnu:glibc:2.24.90
Gnu » Glibc » Version: 2.25

cpe:2.3:a:gnu:glibc:2.25
Gnu » Glibc » Version: 2.25.90

cpe:2.3:a:gnu:glibc:2.25.90
Gnu » Glibc » Version: 2.26

cpe:2.3:a:gnu:glibc:2.26
Gnu » Glibc » Version: 2.26.9000

cpe:2.3:a:gnu:glibc:2.26.9000
Gnu » Glibc » Version: 2.27

cpe:2.3:a:gnu:glibc:2.27
Gnu » Glibc » Version: 2.3

cpe:2.3:a:gnu:glibc:2.3
Gnu » Glibc » Version: 2.3.1

cpe:2.3:a:gnu:glibc:2.3.1
Gnu » Glibc » Version: 2.3.10

cpe:2.3:a:gnu:glibc:2.3.10
Gnu » Glibc » Version: 2.3.2

cpe:2.3:a:gnu:glibc:2.3.2
Gnu » Glibc » Version: 2.3.3

cpe:2.3:a:gnu:glibc:2.3.3
Gnu » Glibc » Version: 2.3.4

cpe:2.3:a:gnu:glibc:2.3.4
Gnu » Glibc » Version: 2.3.5

cpe:2.3:a:gnu:glibc:2.3.5
Gnu » Glibc » Version: 2.3.6

cpe:2.3:a:gnu:glibc:2.3.6
Gnu » Glibc » Version: 2.4

cpe:2.3:a:gnu:glibc:2.4
Gnu » Glibc » Version: 2.5

cpe:2.3:a:gnu:glibc:2.5
Gnu » Glibc » Version: 2.5.1

cpe:2.3:a:gnu:glibc:2.5.1
Gnu » Glibc » Version: 2.6

cpe:2.3:a:gnu:glibc:2.6
Gnu » Glibc » Version: 2.6.1

cpe:2.3:a:gnu:glibc:2.6.1
Gnu » Glibc » Version: 2.7

cpe:2.3:a:gnu:glibc:2.7
Gnu » Glibc » Version: 2.8

cpe:2.3:a:gnu:glibc:2.8
Gnu » Glibc » Version: 2.9

cpe:2.3:a:gnu:glibc:2.9
Netapp » Data Ontap Edge » Version: N/A

cpe:2.3:a:netapp:data_ontap_edge:-
Netapp » Element Software Management » Version: N/A

cpe:2.3:a:netapp:element_software_management:-
Oracle » Communications Session Border Controller » Version: 8.0.0

cpe:2.3:a:oracle:communications_session_border_controller:8.0.0
Oracle » Communications Session Border Controller » Version: 8.1.0

cpe:2.3:a:oracle:communications_session_border_controller:8.1.0
Oracle » Communications Session Border Controller » Version: 8.2.0

cpe:2.3:a:oracle:communications_session_border_controller:8.2.0
Oracle » Enterprise Communications Broker » Version: 3.0.0

cpe:2.3:a:oracle:enterprise_communications_broker:3.0.0
Oracle » Enterprise Communications Broker » Version: 3.1.0

cpe:2.3:a:oracle:enterprise_communications_broker:3.1.0
Redhat » Virtualization Host » Version: 4.0

cpe:2.3:a:redhat:virtualization_host:4.0
Redhat » Enterprise Linux Desktop » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux_desktop:7.0
Redhat » Enterprise Linux Server » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux_server:7.0
Redhat » Enterprise Linux Workstation » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux_workstation:7.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-11236

Products

Pricing

Contact Us